$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bd5ab24-1536-3713-b0d5-df8abd943da2.roa File: 3bd5ab24-1536-3713-b0d5-df8abd943da2.roa (raw, json) Hash identifier: W1/rJmB0VD6OTnNlUMvZ6XIpPO1BqhIL6bVAKu8ZVbw= Subject key identifier: 19:FD:BA:2D:81:2C:D5:B9:81:B4:22:0F:A8:9B:E4:90:54:73:03:6F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAA979E05921C44D19AA68780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bd5ab24-1536-3713-b0d5-df8abd943da2.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 32651 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:9e:05:92:1c:44:d1:9a:a6:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=5c171a95-f0e5-4551-a0d0-63391218e695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d7:2d:85:08:a9:47:58:0b:d8:b2:36:c0:08: 5b:57:23:15:47:43:92:8e:7c:a5:47:29:bf:f5:f5: 29:7a:0c:3e:73:76:fc:c2:d0:8a:ff:2e:07:c5:24: 4b:6b:db:cf:41:6f:fe:f4:3d:93:28:f2:5c:f8:15: 33:6a:78:d4:16:39:df:08:64:85:55:33:14:80:3d: ae:c5:81:ec:48:13:3a:64:89:f4:de:5e:71:de:3e: 05:d7:ac:3a:3c:f3:e3:40:aa:ca:56:03:9b:09:3d: 3b:ce:15:b7:10:5c:84:aa:88:39:d6:32:45:7e:f0: 3b:f5:83:59:11:45:ac:1f:0f:91:27:98:f7:dc:8f: 74:79:91:2a:12:cc:42:82:e0:72:8d:67:92:bb:c5: cb:8a:8a:37:25:be:3a:91:c4:bf:38:7c:be:e9:3b: 37:86:dd:fe:cc:b0:6e:c0:d8:34:13:9a:bf:75:4e: e5:56:68:80:03:2a:d0:0c:b6:b8:57:3d:af:9d:07: 21:06:a9:e8:11:04:cd:de:d6:1f:8a:f9:23:28:b4: c7:b5:fb:d4:06:6f:95:12:ae:3e:e6:1a:5d:e3:79: 74:84:0f:0d:a8:22:88:bf:63:f6:56:83:95:51:50: 77:36:66:cc:f2:3d:ef:1e:fb:f6:b6:3a:27:fd:fc: 22:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FD:BA:2D:81:2C:D5:B9:81:B4:22:0F:A8:9B:E4:90:54:73:03:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bd5ab24-1536-3713-b0d5-df8abd943da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:34:e8:bd:29:38:d6:3b:42:57:58:21:bf:62:f4:26:ba:c9: 42:5a:76:46:18:86:1b:47:e8:34:66:45:14:1c:a9:42:5e:43: 28:9a:93:f7:42:ae:00:11:1d:aa:24:01:a7:09:b4:a8:d0:21: 64:fa:71:a3:45:a4:40:e7:d7:23:dc:78:e2:e9:b3:23:06:1e: a8:a3:8c:b4:c9:5d:96:4d:44:a1:84:5d:0b:5e:e6:c6:7a:bd: e8:5e:b2:10:55:71:f6:02:38:aa:6c:cc:75:9c:66:95:5a:4a: c2:7f:81:31:33:6c:22:2b:2a:5e:cc:43:00:89:dd:29:12:b8: 41:76:b5:e1:b7:c8:29:14:30:2e:6d:13:d4:0e:fc:1a:79:61: f1:25:0c:58:5b:2f:b4:d9:c7:b0:34:b0:1a:79:2b:c3:d1:a2: 9f:18:7c:2f:e3:85:88:74:c5:5f:7a:1f:31:58:17:74:4f:65: e0:d2:08:8d:fd:09:ba:af:ad:f3:13:05:0a:81:60:fe:df:ce: f7:25:5f:9e:c8:c0:e5:4b:df:fe:bd:22:b1:bd:63:c3:d3:c1: 63:c8:54:dc:a5:89:15:c6:04:b4:31:7e:5d:a1:ad:24:c0:d4: c5:e6:7c:bc:a4:8d:f8:19:02:e8:8a:5d:33:b3:f5:5e:0d:4c: b8:4b:84:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql54FkhxE0Zqmh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NWMxNzFhOTUtZjBlNS00NTUxLWEwZDAtNjMzOTEyMThlNjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodcthQipR1gL2LI2wAhbVyMVR0OSjnylRym/ 9fUpegw+c3b8wtCK/y4HxSRLa9vPQW/+9D2TKPJc+BUzanjUFjnfCGSFVTMUgD2u xYHsSBM6ZIn03l5x3j4F16w6PPPjQKrKVgObCT07zhW3EFyEqog51jJFfvA79YNZ EUWsHw+RJ5j33I90eZEqEsxCguByjWeSu8XLioo3Jb46kcS/OHy+6Ts3ht3+zLBu wNg0E5q/dU7lVmiAAyrQDLa4Vz2vnQchBqnoEQTN3tYfivkjKLTHtfvUBm+VEq4+ 5hpd43l0hA8NqCKIv2P2VoOVUVB3NmbM8j3vHvv2tjon/fwiBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBn9ui2BLNW5gbQiD6ib5JBUcwNvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2JkNWFiMjQtMTUzNi0z NzEzLWIwZDUtZGY4YWJkOTQzZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEM06L0pONY7QldYIb9i9Ca6yUJadkYYhhtH6DRmRRQcqUJeQyiak/dC rgARHaokAacJtKjQIWT6caNFpEDn1yPceOLpsyMGHqijjLTJXZZNRKGEXQte5sZ6 veheshBVcfYCOKpszHWcZpVaSsJ/gTEzbCIrKl7MQwCJ3SkSuEF2teG3yCkUMC5t E9QO/Bp5YfElDFhbL7TZx7A0sBp5K8PRop8YfC/jhYh0xV96HzFYF3RPZeDSCI39 CbqvrfMTBQqBYP7fzvclX57IwOVL3/69IrG9Y8PTwWPIVNyliRXGBLQxfl2hrSTA 1MXmfLykjfgZAuiKXTOz9V4NTLhLhKA= -----END CERTIFICATE-----Generated at Wed Oct 29 07:16:44 2025 by rpki-client